Docker Blog
-
Trusted Foundation Oct 23, 2026
PHP2Shell and eMudhra Patched
PHP2Shell and the eMudhra certificate compromise landed in the same week. Docker published a fixed PHP image within 24 hours and rebuilt the trust store across the catalog.
Read now
-
Oct 22, 2026
Security Update on PHP2Shell: Impact for Docker Customers
On Tuesday, October 20, 2026, Docker began tracking two critical vulnerabilities in PHP, CVE-2026-109618 and CVE-2026-109619, commonly known as PHP2Shell.
Read now
-
Oct 22, 2026
ActiveState Partners with Docker to Secure the Open Source in Enterprise Containers
Container security spans the image, build, and runtime. See the practical steps that shrink your attack surface and keep vulnerabilities out of production.
Read now
-
Oct 21, 2026
Your Agent Runs in a Docker Sandbox. Now It Can Join a Team.
Run AI agents in Docker Sandboxes with BAND AI. Learn how to connect isolated agents, collaborate across environments, and manage access securely.
Read now
-
Ecosystem Oct 21, 2026
From baseline to Secure Software Factory: securing the systems that build your software
In July, Docker, Snyk and Keycard published Agent Baseline, an open, vendor-neutral reference architecture that defines security outcomes for running AI agents in the enterprise. It grew out of conversations with industry leaders who want to adopt agents more broadly but need answers to three questions: What is operating, with what capabilities? Is it staying…
Read now
-
Oct 16, 2026
From Containers to Sandboxes: Developer Trust in the Agentic Era
The 2026 Stack Overflow Developer Survey shows only 7% of developers trust AI output for important decisions. Here’s what that means for running agents safely.
Read now
-
Oct 14, 2026
AI Agent Security Risks: What Can Go Wrong When Agents Act on Their Own
Learn the top AI agent security risks, from prompt injection to excessive autonomy and credential exposure, and how to contain them.
Read now
-
Oct 14, 2026
Harbor + Docker Sandboxes: Run Safe, Reproducible Agent Evals
Harbor can now run every eval task in Docker Sandboxes Docker Sandboxes are MicroVM environments to run agents like Claude Code, Codex, Cursor, and more safely With Sandboxes, define custom network policies for fair, reproducible evals Run your evals locally or in the cloud: starting for free on Docker Sandboxes on local surfaces and scaling…
Read now
-
Oct 12, 2026
Docker Hub security advisory: personal access tokens transferred during account-to-organization conversions
CVE-2026-105445: Docker Hub account conversion could re-assign personal access tokens to a new owner. Read what happened, who was affected, and the fix.
Read now
